Talis Protocol pauses listings after NFT exploit nets attacker about $3,100

An attacker drained roughly 5,700 escrowed NFTs from the Injective-based marketplace and dumped most of them for pennies Talis Protocol, an NFT marketplace built primarily on the Injective blockchain, has frozen new listings and auctions. An attacker exploited its smart contracts and walked off with about 5,700 escrowed NFTs. The haul was small. On-chain data shows the attacker made about 445 INJ, worth roughly $3,100 at the time. For a heist that touched thousands of digital assets, that is the crypto equivalent of breaking into a jewelry store and leaving with the display cases. How the exploit unfolded The incident was reported on October 31, 2026. The attacker targeted vulnerabilities in two parts of the platform: the marketplace contract and the auction contract. Both contracts held NFTs in escrow. Once the roughly 5,700 NFTs were withdrawn, the attacker sold them into open collection offers. Collection offers are standing bids on any item from a given collection, so the attacker could unload assets instantly without waiting for a buyer to show up. Most of the NFTs sold for around 2 cents each, mainly to bid bots. These are automated programs that sit on low offers and scoop u...